This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft File: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft (raw, json) Hash identifier: lo5Hqz3YcfvHyD++AEs/20U8WF5oms5bQavsdq8G2Qc= Subject key identifier: 91:07:69:C1:3E:07:1B:3F:75:3B:36:06:96:A9:95:4B:5C:31:C0:B0 Authority key identifier: BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A Certificate issuer: /CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a Certificate serial: 41DD8F602A31FB97F9486561BA980D67172AA98C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft Manifest number: 16 Signing time: Sun 25 Jan 2026 11:47:40 +0000 Manifest this update: Sun 25 Jan 2026 11:42:40 +0000 Manifest next update: Mon 26 Jan 2026 15:15:40 +0000 Files and hashes: 1: AS214749.asa (hash: MoAaARtLpU4IgpGlank1yu8hoXiijqpZdHPSCioTsXY=) 2: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl (hash: zHCOoijxziZ/MxoZzE89AZIoyPqveWK6w/7ixZc+MJE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dd:8f:60:2a:31:fb:97:f9:48:65:61:ba:98:0d:67:17:2a:a9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a Validity Not Before: Jan 25 11:42:40 2026 GMT Not After : Jan 26 15:15:40 2026 GMT Subject: CN=910769C13E071B3F753B360696A9954B5C31C0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:1e:d7:ba:b4:94:d6:0d:65:5d:31:45:8a: 6c:99:eb:6c:aa:d7:9e:38:da:c5:fa:44:b8:22:c8: 32:78:29:6b:c0:c3:72:92:0e:43:40:d7:28:41:c5: ab:7c:69:76:eb:03:28:85:12:54:9d:08:de:9d:cd: 62:30:31:15:f9:f3:b0:ce:f8:4c:77:39:97:a9:e6: 76:56:66:93:ed:bc:5e:92:45:0e:38:d6:16:06:8b: b4:60:18:79:c6:b9:2e:a8:2b:08:8d:fc:a4:e0:19: 76:43:a5:84:1f:db:28:2e:ac:cd:b0:58:47:e2:5c: e8:1b:1f:a9:dd:c7:c0:6a:f4:df:e7:7f:5d:c7:9d: eb:82:47:34:51:27:93:91:33:17:0f:e1:ee:21:c0: 41:23:f0:04:e5:a8:60:23:14:1a:b6:e2:48:73:87: f5:da:f0:16:ca:e1:c5:45:fb:0f:ac:cb:17:4b:dc: dc:ab:27:24:0a:5e:39:27:c0:8f:8b:2c:79:57:ab: 1e:1b:d4:92:4b:97:9c:23:64:e9:9e:2d:8b:5f:08: 6e:2f:3b:cf:9d:1c:94:16:ea:ba:aa:b9:56:7f:bf: 9a:0c:bd:07:2d:9c:ed:b2:a8:bd:51:66:17:ad:9d: 83:0c:26:9a:0d:f5:f6:85:81:c8:96:17:1b:b0:8c: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:07:69:C1:3E:07:1B:3F:75:3B:36:06:96:A9:95:4B:5C:31:C0:B0 X509v3 Authority Key Identifier: keyid:BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:59:66:d9:7b:57:3e:6f:ab:68:42:b2:8a:53:15:2e:c5:16: 8f:3b:31:b8:1a:4d:1d:bc:9d:fb:47:46:8e:c6:79:89:5a:0e: e0:39:e1:a9:5c:81:b6:14:84:a2:6c:5c:2c:00:ed:d7:1c:16: b6:6b:1d:52:d7:09:02:03:d3:91:5d:31:e9:49:4a:10:aa:40: 38:1c:ae:be:20:06:c5:ce:37:08:6e:37:1d:33:5c:3f:5e:a4: 43:db:06:44:64:e0:49:88:8b:49:09:d2:cb:f3:8f:bc:29:d6: 0a:d3:93:87:82:36:7a:7a:52:c0:2c:78:e8:7a:79:40:ad:98: 27:40:e6:a6:92:68:4e:77:34:78:d3:be:9d:4c:94:5b:35:7f: 10:c9:d8:be:cc:3b:10:b9:df:29:76:66:3b:b6:9b:74:24:f9: 21:39:42:c6:f9:38:72:cb:dd:9d:27:72:dd:14:64:c8:a7:db: b9:44:51:2a:9e:03:1e:3c:be:f2:ad:68:c1:f1:f6:f5:32:c4: 00:7a:4f:03:f0:cc:b2:a0:db:fb:e7:c0:6d:48:ed:03:f9:af: 17:9e:f5:18:eb:33:90:c8:22:56:80:ae:c7:4f:c6:4b:62:06: 70:23:5f:ff:c3:d5:6c:ee:77:8e:0b:33:fd:17:a9:62:cc:f7: dd:fd:e8:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQd2PYCox+5f5SGVhupgNZxcqqYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmM5ZTA5Mjg2MTE0YTBhYmFlZmNmOGVjNDllOGM1ZmE1 ZTc4NDg0YTAeFw0yNjAxMjUxMTQyNDBaFw0yNjAxMjYxNTE1NDBaMDMxMTAvBgNV BAMTKDkxMDc2OUMxM0UwNzFCM0Y3NTNCMzYwNjk2QTk5NTRCNUMzMUMwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2x7XurSU1g1lXTFFimyZ62yq 15442sX6RLgiyDJ4KWvAw3KSDkNA1yhBxat8aXbrAyiFElSdCN6dzWIwMRX587DO +Ex3OZep5nZWZpPtvF6SRQ441hYGi7RgGHnGuS6oKwiN/KTgGXZDpYQf2ygurM2w WEfiXOgbH6ndx8Bq9N/nf13HneuCRzRRJ5ORMxcP4e4hwEEj8ATlqGAjFBq24khz h/Xa8BbK4cVF+w+syxdL3NyrJyQKXjknwI+LLHlXqx4b1JJLl5wjZOmeLYtfCG4v O8+dHJQW6rqquVZ/v5oMvQctnO2yqL1RZhetnYMMJpoN9faFgciWFxuwjBFTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkQdpwT4HGz91OzYGlqmVS1wxwLAwHwYDVR0j BBgwFoAUvJ4JKGEUoKuu/PjsSejF+l54SEowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDZmZWI3OWQtOWExZC00Y2YyLTk3NDctZWNiMzJlNmM3 ODUxLzAvQkM5RTA5Mjg2MTE0QTBBQkFFRkNGOEVDNDlFOEM1RkE1RTc4NDg0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZKNEpLR0VVb0t1dV9QanNTZWpGLWw1 NFNFby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNmZlYjc5ZC05 YTFkLTRjZjItOTc0Ny1lY2IzMmU2Yzc4NTEvMC9CQzlFMDkyODYxMTRBMEFCQUVG Q0Y4RUM0OUU4QzVGQTVFNzg0ODRBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsllm2XtXPm+raEKyilMV LsUWjzsxuBpNHbyd+0dGjsZ5iVoO4DnhqVyBthSEomxcLADt1xwWtmsdUtcJAgPT kV0x6UlKEKpAOByuviAGxc43CG43HTNcP16kQ9sGRGTgSYiLSQnSy/OPvCnWCtOT h4I2enpSwCx46Hp5QK2YJ0DmppJoTnc0eNO+nUyUWzV/EMnYvsw7ELnfKXZmO7ab dCT5ITlCxvk4csvdnSdy3RRkyKfbuURRKp4DHjy+8q1owfH29TLEAHpPA/DMsqDb ++fAbUjtA/mvF571GOszkMgiVoCux0/GS2IGcCNf/8PVbO53jgsz/RepYsz33f3o BA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:29 2026 by rpki-client